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ABSTRACT This paper presents two unconventional links be- 
tween quantum and classical physics. The first link appears in 
the study of quantum cryptography. In the presence of a spy, 
the quantum correlations shared by Alice and Bob are imper- 
fect. One can either process the quantum information, recover 
perfect correlations and finally measure the quantum systems; 
or, one can perform the measurements first and then process the 
classical information. These two procedures tolerate exactly the 
same error rate for a wide class of attacks by the spy. The sec- 
ond link is drawn between the quantum notions of "no-cloning 
theorem" and "weak-measurements with post-selection", and 
simple experiments using classical polarized light and ordinary 
telecom devices. 



1 Introduction 

The boundary between classical and quantum physics is a fasci- 
nating region, that in my opinion, in spite of several important 
explorations, has not delivered its deepest treasures. I will try to 
motivate this optimistic view on the future of research in physics 
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by presenting some remarkable links between "quantum" and 
"classical" physics. 

We have often read in old textbooks or popular books that 
quantum physics is the physics of the "infinitely small", while 
the "everyday world" is governed by classical physics. This might 
be considered, and probably is, a very naive view. Bohr main- 
tained that the distinction between the classical measurement 
device and the quantum measured system is arbitrary but is nec- 
essary for our understanding. The current view of the physicists 
working in the field, is that everything is quantum, the clas- 
sicality emerging through interactions (the "everyday world" 
appears then to be classical because of the huge amount of in- 
teracting particles involved). This last view, the emergence of 
classical behavior simply because of interaction, is nowadays un- 
challenged by observation: no phenomenon can be produced as 
an evidence of its falseness. Thus, it is a satisfactory description 
for any practical purpose, although one may question its validity 
Weltanschauung. 

The links between "classical" and "quantum" that am I going 
to present here are of a different nature: they do not seem to arise 
simply from many interacting quantum objects that together 
exhibit classical behavior. The first link (Section 2) deals with 
quantum cryptography 1 . The second link (Section 3) shows how 
typical "quantum" notions (namely, the no-cloning theorem and 
the idea of weak measurements with post-selection) manifest 
themselves in phenomena that can be described using an entirely 
classical theory of light, and that can be revealed using the 
devices of ordinary telecommunication networks. 

2 Classical bounds in quantum cryptography- 
Quantum cryptography is nowadays the most developed appli- 
cation of quantum information theory [Tj. A more exact name 
for quantum cryptography would be quantum key distribution 



lr This was the topic of my talk during the Workshop Multiscale Methods in Quantum 
Mechanics, Rome, 16-20 December, 2002. 
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(QKD): the goal of the quantum processing is to establish a se- 
cret key between two distant partners, Alice and Bob, avoiding 
the attacks of a possible eavesdropper Eve. Once a common se- 
cret key is established, Alice and Bob will encode the message 
using classical secret-key protocols, known to be unbreakable 
even if the message is sent on a public authenticated channel. 





1 



quantum channel 





1 



Alice 



Eve 



Bob 



FIGURE 1 . The scheme of the QKD implementation with entangled 
states. Alice prepares a maximally entangled state |<£). She measures 
one particle (here, a two-level system) and forwards the other one to 
Bob. The spy Eve accesses the quantum channel and tries to obtain 
some information by interacting with the flying particle. 



We describe (fig. [TJ an implementation of QKD that uses 
a source of entangled states, and for clarity we speak of two- 
dimensional quantum systems (qubits). Alice has a source that 
produce a pair of qubits in the maximally entangled state 

\®)ab = -^(l+«>®l + *> + |-«>®|-*» 

= —= (| + x) ® I + x) - I - x) ® I -x)) . (1) 
v2 

She keeps one qubit and forwards the other one to Bob. In the 
absence of Eve: (i) if Alice and Bob measure the same observ- 
able, either a z or o~ x , they obtain the same result, the same 
random bit; (ii) if one of the partners measures a z and the other 
a x , they obtain completely uncorrelated random bits. This pro- 
tocol is repeated a large number of times. At the end, the items 
in which Alice and Bob have performed different measurements 
are discarded later by public communication on the classical 
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channel, leaving Alice and Bob with a list of perfectly corre- 
lated random bit: the secret key. This is what happens in the 
absence of the spy. 

Eve can in principle do whatever she wants on the quantum 
channel. The security of QKD comes from the fact that, since 
any measurement or interaction perturbs the state, Eve's inter- 
vention cannot pass unnoticed: Alice and Bob know that some- 
one is spying. Two situations are then possible. (I) Eve has got a 
"small" amount of information; in this case, Alice and Bob can 
process their data in order to obtain a shorter but completely 
secret key. Such classical protocols are the object of important 
studies in classical information theory. (II) Eve has got "too 
much" information; then Alice and Bob discard the whole key. 
This may seem a failure, but it is not: it simply means that the 
spy has no other alternative than cutting the channel and forbid 
any communication; and this achieves the goal of cryptography, 
because no encrypted message is ever sent that the spy could 
decode. 

It is then important to quantify the words "small" and "too 
much" in the previous discussion: what is the amount of Eve's 
information that Alice and Bob can tolerate, that is, at what 
critical value are they obliged to discard the whole key? Here is 
where remarkable links appear between classical and quantum 
information. 

¥(A,B,E) > <X>(A,B)V(E) 

I I 

P(A,B,E) > P'(A,B)P(E) 

FIGURE 2. Possible ways for the extraction of a secret key. One 
starts from a global quantum state ty(A, B, E) of Alice, Bob and 
Eve, and wants to end up with a classical secret key P'(A, B)P{E) 
with P'(A = B) = 1. Grey arrows (horizontal): distillation, quantum 
or classical; black arrows (vertical): measurement of the quantum 
system, leading to a classical probability distribution. 
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We refer to fig. El Because of Eve's intervention, before any 
measurement the quantum system is in a three-party entangled 
state of Alice-Bob-Eve, ^ abe- Alice and Bob on their own share 
the mixed state pab, obtained from ^ abe by partial trace on 
Eve's system. Two procedures are then possible: 

(a) The one that we described above: all the partners make 
a measurement, ending in a classical probability distribution 
P(A, B, E). Then, Alice and Bob apply classical protocols {ad- 
vantage distillation) in order to extract a shorter secret key, 
that is, a shorter list of bits distributed according to a new 
distribution P'(A, B)P'(E) in which Eve is uncorrelated and 
P'(A = B) = 1. 

(b) If the state pab is entangled, Alice and Bob can delay 
any measurement and process many copies of pab, to obtain a 
smaller number of copies of \&) AB — and in this case, auto- 
matically Eve is uncorrelated. This procedure is known as en- 
tanglement distillation, and is one of the fundamental processes 
of quantum information. Once Alice and Bob have \Q) AB , the 
measurement provide them immediately with the secret key. 

Having understood this, we can state the main results that 
have been obtained: 

• Classical advantage distillation of P(A, B, E) is possible 
for bits if and only if quantum entanglement distillation 
is possible for the state pab (which is equivalent of asking 
that pab is entangled in the case of qubits). This was 
demonstrated by Gisin and Wolf when Eve uses the so- 
called optimal individual attack [2 , and has been recently 
extended to all individual attacks 

• The same holds for dits (d-valued random variables) and 
qudits (d-dimensional quantum systems), under Eve's in- 
dividual attack that is supposed to be the optimal one 
01 Ej. The demonstration is more involved because not all 
entangled states of two qudits are distillable. 

• If pab is entangled enough to violate a Bell inequality, 
then a secret key can be extracted from P(A, B, E) in 
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an efficient way, that is, using only one-way communica- 
tion. This was first proven in Ref. for the state-of-the- 
question, see j3 a . A similar result holds for a multi-partite 
scheme of key distribution known as "quantum secret shar- 
ing" 0. 

Mainly because Eve's optimal attack is not generally known, 
there are still several open questions. The most important ones 
are reviewed in the last section of Ref. |E] . 

This concludes my first "unconventional" link between the 
classical and the quantum worlds: at the level of information 
processing, specifically of the extraction of a secret key from 
an initially noisy distribution/state, the critical parameters are 
exactly the same, irrespective whether the purification of the 
correlations is performed at the quantum or at the classical level. 
Moreover, a typically quantum feature such as the violation of 
Bell's inequalities is related to the efficiency of the classical key- 
extraction procedure. 

3 Quantum physicists meet telecom engineers 

This section is devoted to another kind of unconventional link 
between the classical and the quantum world. I prefer let the 
examples speak first and draw my conclusions later. 

3.1 No-cloning theorem 

The first example concerns the no-cloning theorem, a well-known 
primitive concept of quantum information [Hj. In its basic form, 
it states that no evolution (or more generally, no trace-preserving 
completely positive map) can bring <g> |0) onto \vf)) (g) \ip) for 
an unknown state 

This no-go theorem has motivated the search for an optimal 
quantum doner, given that perfect cloning is impossible, what 
is the best one can do? Optimal doners have indeed been found 
and widely studied; all the meaningful references can be found 
in any basic text on quantum information, e.g. 0. In the course 
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of these investigations, a sharp link has been found between op- 
timal cloning and the well-known phenomenon of amplification 
of light: stimulated emission of light in a given mode (perfect 
amplification, or cloning) cannot be done without spontaneous 
emission (random amplification). Suppose that N photons enter 
an amplifier, and at the output one selects the cases in which 
exactly M > N photons are found: it turns out that this process 
realizes the optimal quantum cloning from N to M copies. The 
fidelity of the amplification is the ratio between the mean num- 
ber of photons found in the initial mode (i.e. the mean number 
of correct copies) and the total number of copies, M here. The 
optimal fidelity is found to be 

, MN+M+N 
J- n ^m ~ M{N + 2 ) ■ W 

We realized an experimental demonstration of optimal cloning 
using the principle just described to clone the polarization of 
light [llj. Polarized light of intensity \i in is sent into a conven- 
tional fiber amplifier (exactly as those that are used in telecom- 
munications); at the output, we have an intensity \i ou t\ we sepa- 
rate the input polarization mode from its orthogonal, and mea- 
sure the fidelity. The theoretical prediction for this experiment 
is 

^~ Qf^out l^in t^out l^in /q\ 

m h L outh l "in i" ^H-out 

where Q € [0, 1] is a parameter related to the quality of the 
amplification process. The experimental results are in excellent 
agreement (fig. EJ). 

It is striking to notice that for Q = 1, formula © is exactly 
the same as (J2J). Its meaning is however rather different. In our 
experiment, everything is classical: the laser light is in a coher- 
ent state, therefore it can be described by a classical field; the 
amplifier is "classical" in the sense that it transforms coherent 
states into coherent states. The quantities /ij n and ^ out that ap- 
pear in eq.® are not photon numbers as the iV and M of eq. 
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FIGURE 3. Inset: 

Hout as a function of /J,i n ', the linear fit shows that 
we are far from the saturation of the amplifier. Main figure: fidelity 
as a function of /Uj n . Solid line: Q = 0.8, best fit with eq. ©. Dotted 
lines: upper: Q = 1 (optimal cloning); lower: Q = (no cloning). 
From Ref. Q3]- 

(J2J), but mean values, that have been measured using an inten- 
sity detector. As I said above, all the devices (source, fibers, 
amplifier, detectors) are typical of telecom engineering. 



3.2 Weak measurements with post- selection 

The second example is related to the meaning and physics of 
the measurement process, a widely debated topic of the founda- 
tions of quantum mechanics. In this context, Aharonov, Vaid- 
man and others introduced the notion of weak measurement with 
post-selection ^2], sometimes called the "two-state formalism" 
of quantum mechanics. The authors' intention in studying this 
formalism is strongly motivated by interpretational issues; that 
is why most physicists tend to look at these concepts as artificial 
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FIGURE 4. When a polarized pulse passing through a PMD fiber, 
the polarization mode H (parallel to the birefringency axis in the 
Poincare sphere) and its orthogonal V are separated in time. A mea- 
surement of the time-of- arrival (TOA) is a measurement, strong or 
weak, of the polarization. 

ones, introduced on purpose, and that do not add anything to 
physics itself. To date, apart from some experiments that were 
designed on purpose, only some complex tunnelling phenomena 
had received some clarification through this formalism. 

We have found however jT3j that this formalism does apply to 
something that exists and is extremely widespread: once again, 
the optical telecommunication network. Telecom engineers are 
performing weak measurements with post-selection in basically 
all that they do! A modern optical network is composed of dif- 
ferent devices connected through optical fibers. With respect 
to polarization, two main physical effects are present. The first 
one is polarization-mode dispersion (PMD): due to birefringency, 
different polarization modes propagate with different velocities; 
in particular, the fastest and the slowest polarization modes 
are orthogonal. PMD is the most important polarization effect 
in the fibers. The second effect is polarization- dependent loss 
(PDL), that is, different polarization modes are differently at- 
tenuated. PDL is negligible in fibers, but is important in devices 
like amplifiers, wavelength-division multiplexing couplers, isola- 
tors, circulators etc. 



The first piece of the connection we want to point out is the 
following: a PMD element performs a measurement of polariza- 
tion on light pulses (Fig. 0]). In fact, PMD leads to a separation 
5r of two orthogonal polarization modes in time. If 5r is larger 



X 



than the pulse width t c , the measurement of the time of arrival 
is equivalent to the measurement of polarization — PMD acts 
then as a "temporal polarizing beam-splitter". However, in the 
usual telecom regime 5r is much smaller than t c . In this case, 
the time of arrival does not achieve a complete discrimination 
between two orthogonal polarization modes anymore; but still, 
some information about the polarization of the input pulse is en- 
coded in the modified temporal shape of the output pulse. We 
are in a regime of weak measurement of the polarization. The 
formulae introduced by Aharonov and co-workers are recovered 
by measuring the mean time of arrival, that is, the " center of 
mass" of the output pulse. 

The second piece of the connection defines the role of PDL: 
a PDL element performs a post-selection of some polarization 
modes. Far from being an artificial ingredient, post-selection of 
some modes is the most natural situation in the presence of 
losses: one does always post-select those photons that have not 
been lost! This would be trivial physics if the losses were in- 
dependent of any degree of freedom, just like random scatter- 
ing; but in the case of PDL, the amount of losses depends on 
the meaningful degree of freedom, polarization. An infinite PDL 
would correspond to the post-selection of a precise polarization 
mode (a pure state, in the quantum language); a finite PDL cor- 
responds to post-selecting different modes with different proba- 
bilities (a mixed quantum state). 

In summary: by tuning the PMD, we can move from weak 
to strong measurements of polarization; the PDL performs the 
post-selection of a pure or of a mixed state of polarization. 
Any telecom network, devices connected by fibers, is performing 
"weak measurements with post-selection". Just as in the exam- 
ple of quantum cloning discussed above, all this can be (and is 
actually) described by the classical theory of light. 

3. 3 The fundamental role of entanglement 

We have shown that two results thought to be "typically quan- 
tum", namely the no-cloning theorem and the theory of weak 
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measurements, can be demonstrated with classical light and 
standard telecom devices. The key for a deep understanding is 
the conceptual distinction between two superposition principles: 
the classical one, which is dynamical (fields superpose because 
Maxwell's equations are linear); and the quantum one, which 
is kinematical: states are superposed. These two superposition 
principles, at the level of interpretation, have a completely dif- 
ferent meaning. However, it may difficult to tell which is acting 
in a real situation. 

I would like to extend this observation to stress the fundamen- 
tal role of entanglement. In the traditional textbooks of quantum 
mechanics, entanglement has been considered a kind of a side- 
issue, and in any case a derived notion: if a composed quantum 
system is described by a tensor product of Hilbert spaces, and if 
the superposition principle has to hold in this total space, then 
non-factorizable states must appear. In other words, tradition- 
ally one starts with the quantum physics of the single system, 
states the superposition principle in this context, and derives 
the existence of entanglement a posteriori. While this may be 
an unavoidable approach for a didactic course, I don't think that 
the view so conveyed is really the whole story. Students meet- 
ing the Stern-Gerlach experiment in their "quantum physics" 
course fail to realize that they have studied its analog with light 
polarization some months before, in their lectures on " classical 
electrodynamics" . But what does it mean? Is a spin | classical? 
Or is polarization a quantum intruder in the classical theory of 
light? 

The solution comes by noticing that the Stern-Gerlach ex- 
periment is not the only experimental result involving the spin! 
The spins of the electrons explain the Mendeleev table via the 
Pauli exclusion principle, a principle that has no classical ana- 
logue; different cross-sections have been observed in scattering 
experiments, according to whether the full spin was in a sym- 
metric or in the anti-symmetric state; spins couple coherently to 
one another in nuclear magnetic resonance, or to the polariza- 
tion of photons in atomic physics... The list may rapidly become 
very large. But if we give a second glance to this list, we notice 
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that it contains only phenomena in which two or more quantum 
systems are involved. And if we finally notice that "coherent 
interaction" means "entanglement", we have the solution: we 
know that a single spin \ is a quantum object because we ob- 
serve the consequences of its entanglement with other spins or 
other degrees of freedom. The same can be said for polarization. 

The difference between the "classical superposition principle 
of waves" and the "quantum superposition principle of states" 
lies in the fact that only the second gives rise to entanglement. 
If we'd have only the quantum physics of the single particle 
(the Stern-Gerlach experiment, Young's double-slit...), the most 
economic solution would be to adopt once for all the de Broglie- 
Bohm view of a real particle guided by a hidden wave — and 
we'd lose all the fascinating view of the world that is inspired 
by quantum physics. 

4 Conclusion 

The main message I wanted to convey is that "classical" and 
"quantum" physics — or information — are tightly connected. 
Specifically, I have discussed how in the analysis of the security 
of quantum cryptography, we discover numbers that come from 
the analysis of the security of classical cryptography (Section 2); 
and how experiment with classical light and standard telecom 
devices can provide demonstrations of the no-cloning theorem 
and of the theory of weak measurements with post-selection 
(Section 3). 

In this text, I reported on results obtained at the University of 
Geneva under the direction of prof. Nicolas Gisin, together with 
Antonio Acfn, Nicolas Brunner, Daniel Collins, Sylvain Fasel, 
Gregoire Ribordy and Hugo Zbinden. I also benefited from sev- 
eral discussions with Frangois Reuse and Antoine Suarez. 
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